general

[rustic carbon]

Ohhhh I thought it was a htb one

aight bet

Why not?

[sharp shuttle]

you will get pressed hard by people more confrontational than myself

[meager kernel]

@supple plume what if I exploit it just a little bit

And then report it

[tawdry sorrel]

CJCA CWES and then CPTS
Cuz CWES is easier than CPTS it will make things easier for you

[supple plume]

Well of they authorized you

But if it just was words

[molten bobcat]

ILLEGAL

[supple plume]

You know

[sharp shuttle]

in bullet points, tell me what red teaming is

[rustic carbon]

Idk if that's a good plan tho..

[molten bobcat]

Bro under no circumstances are you to exploit a vuln you know to exist

[rustic carbon]

I need both blue and red knowledge for it and I will lack blue knowledge

[molten bobcat]

Report the vuln and move on

[supple plume]

You probably want some signed paperwork that allows you to do that

[meager kernel]

That's the goal to get tomorrow

[tawdry sorrel]

A little bit is not illegal

[molten bobcat]

???

[tawdry sorrel]

just kidding

[nimble tundra]

thats what she said 😔

-# (well at least a modified version of it)

[rustic carbon]

Illegal is illegal

[molten bobcat]

The law doesn't suggest you can do just a little crime and have it be fine TF dude lmao

[sharp shuttle]

@rustic carbon

[supple plume]

Exploit could mean being able to finding another one

[sharp shuttle]

everyday in here i swear

you kids are fucking annoying

[rustic carbon]

Kinda like a cyber swat I heard

[molten bobcat]

[tawdry sorrel]

[sharp shuttle]

what...

explain that

[rustic carbon]

no?

[silver forge]

https://www.youtube.com/watch?v=0cVlTeIATBs

[nimble tundra]

[molten bobcat]

I don't believe that to be correct sir

[sharp shuttle]

just tell me what you mean

what is cyber swat

[supple plume]

Aaaah

[sharp shuttle]

btw SWAT stands for Special Weapons and Tactics

[nimble tundra]

dude focus on learning rather than yapping here 💀

[rustic carbon]

Having more knowledge than a pentester... making viruses, exploiting webs, networks... overall a menace kinda 💀
-# thats what I heard

[meager kernel]

Dude I'm so fucking excited and filled with blood rush rn

[supple plume]

Means doing apt install on ubuntu terminal in starbucks while wearing tactical gear

[rustic carbon]

Tomorrow its late now

[meager kernel]

Im actually easily getting a reverse shell

In the server

😭😭

[molten bobcat]

A red team is comprised of pentesters

[supple plume]

Vro

[molten bobcat]

Just to uh throw that out there

[supple plume]

You can change your grades

[nimble tundra]

then go sleep or you will get bullied

-# (i will be the one to bully you)

[meager kernel]

Irl pentest are actually like HTB I can't fucking believe it

[supple plume]

Please don't get ideas from me

[sharp shuttle]

lets just have you forget what you just said entirely. The main point of red teaming is emulating real-world threats. Its not james bond shit, 99% of the time

[supple plume]

Well da xd

[tawdry sorrel]

That should be your first accual step in real bug bounty hunting

[meager kernel]

Dude I'm not joking, I'm filled with a bloodrush rn

[molten bobcat]

That's such horseshit stupid advice

[meager kernel]

This is so crazy

[rustic carbon]

Dude Im not 5 to sleep at 10pm

[molten bobcat]

Are you guys really this stupid?

[sharp shuttle]

Yes they are

[supple plume]

I am

[meager kernel]

What

[molten bobcat]

Stop dropping reverse shells on vulnerable targets

[nimble tundra]

this line proves you are 5 💀

[rustic carbon]

Ok now that sound even more appealing

[meager kernel]

My guy, I have authorisation 😭

[molten bobcat]

TO FIND A REPORT A VULN

[supple plume]

Please if someone gets any bad advice from me keep in mind I am stupid

[molten bobcat]

NOT EXPLOIT AND GET RCE

[eternal mango]

@meager kernel before reporting anything, you said you have authorisation to do so, make sure you get it in WRITING, with clearly defined scope

[tawdry sorrel]

I am too

[eternal mango]

Otherwise you may well find yourself thrown out

[meager kernel]

CAN I NOT FIND THE FULL EXTENT OF MY VULNERABLILITY

[nimble tundra]

*in

-# (thrown in the jail)

[molten bobcat]

And then the children learned about what Scope is

[meager kernel]

Yes sir

[molten bobcat]

SCOPE

[rustic carbon]

Damnnnn

[eternal mango]

Just because your tutor said it was ok does not mean the whole dept responsible for the platform is in agreement

[dusky jacinth]

Seems fun in here rn

[sharp shuttle]

All you need to know about red teaming and tradecraft in general is this acronym: TTP (Tactics, Techniques, Procedures). Everything else you said is still just pentesting. Red teaming is an exercise typically between defenders and attackers. Focus on becoming a pentester then you can attempt to gain skills for tradecraft

[eternal mango]

(thrown out of the course)

(but yes also maybe I guess?)

[meager kernel]

Alright, I'll get everything sorted tomorrow, then do rest of the bug hunting

[nimble tundra]

well he will be in a quantum state where he is in and out at the same time 💀

[rustic carbon]

Yo you have done your homework I see..

Yee sounds about right

[eternal mango]

Make sure you ask it clearly that your TUTOR has the power to authorise such testing too

[sharp shuttle]

My homework? sure..

[dusky jacinth]

Lol

[eternal mango]

Just because they said you can, doesn't mean they can allow you to

[meager kernel]

@eternal mango dude, I can't believe it but irl bug hunting is so much like HTB

[rustic carbon]

You know what I mean 💀

[eternal mango]

It can be fun

[molten bobcat]

If you can call years of experience in the field "homework" then sure

[eternal mango]

or it can be frustrating

😄

[nimble tundra]

and traumatising

[rustic carbon]

You can do that with only one ip?

[meager kernel]

My college has zero firewall protection 🧍‍♂️

[supple plume]

And duplicated

[molten bobcat]

That can't be true lol

[dusky jacinth]

That’s tuff

[meager kernel]

Yes, my college server operates on one IP

There's like 3 ports on it

[sharp shuttle]

Okay I just need a refresher, the majority of chatters right now are non-american correct?

[rustic carbon]

Ay

[molten bobcat]

Server singular?

[rustic carbon]

that's crazy

[dusky jacinth]

Pretty sure

[supple plume]

I even struggle with English

[meager kernel]

The main college website operates on HTTP but there's a hidden unreleased environment on HTTPS

[nimble tundra]

whats the matter with non Americans ?

[dusky jacinth]

You, cloud and myself ik are American

[rustic carbon]

I think most of us are european..

[sharp shuttle]

Do they not teach ethics in other countries relating to cybersecurity? You guys are embarrasing your home countries

[rustic carbon]

He never said there is anything wrong??

[tawdry sorrel]

Yep 99%

[meager kernel]

No

[nimble tundra]

fixed

[dusky jacinth]

Yikes

[meager kernel]

I don't even have a degree in cybersecurity

[tawdry sorrel]

And I am not an American

[supple plume]

They don't have cybersecurity near their vocabulary around here

[dusky jacinth]

💀

[sharp shuttle]

That's crazy, and you guys are getting our jobs

were doomed

[rustic carbon]

That didnt help

[dusky jacinth]

Indeed

[nimble tundra]

i am not American habibi

[supple plume]

Dang right

[dusky jacinth]

I’m gonna start an anon revival

[tawdry sorrel]

Give me ze Bebsi

[eternal mango]

It doesn't take a degree to have a strong base of ethics

[rustic carbon]

I dont think anyone is american here

[dusky jacinth]

Who wants to be part of a cyber activist group !

[eternal mango]

Nor does it take a degree to have a strong base of experience or skill in.. well, any field

[dusky jacinth]

Kidding

Btw

[nimble tundra]

i won't give you za bebsi you sdubid its my bebsi

[rustic carbon]

When did you start cybersecurity??

[sharp shuttle]

A few of us are, the ones arguing with you guys on ethics...

[molten bobcat]

Goblin am I getting too old for this

[rustic carbon]

If you say we started at the same time Im gonna be pissed 🥀

[molten bobcat]

[eternal mango]

Anyway, just get clear and documented permission from not only your tutor, but the college head too.

Then go to town, and stay IN SCOPE

[eternal mango]

🤣

[nimble tundra]

anyways guys i will brb after eating za shawarma

[dusky jacinth]

Good boys stay in scope

[molten bobcat]

The children need to learn the ways

[dusky jacinth]

Men with goth GFs stay in scope

[eternal mango]

And 100% that scope will not include sharing details of your colleges vulnerabilities in DM with randos

[supple plume]

I used to warn my clients about RCEs and SQLIs when I read the source code, they never care so I just try to do my job as best I can and move on

[tawdry sorrel]

Can I take a bite

[molten bobcat]

[nimble tundra]

sure my friend

[lime trout]

The legal team would never sign off imo

[eternal mango]

mmhmn

[sharp shuttle]

Cybersecurity is not "hrr drrr im hAcKiNg!!" its:

• permission from 5+ people
• a well-defined scoped engagement that took months to come to agreement on
• tons of liability
• 99% reporting

you guys are annoying

[nimble tundra]

https://tenor.com/view/shawarmaz-goku-super-saiyan-shawarma-food-gif-26833179

[lime trout]

Too much risk and liability

[eternal mango]

yarp

[molten bobcat]

If I see another PDF converter malware I'm gonna throw up

[eternal mango]

haaahah

[nimble tundra]

thank you for za complement my friend

[molten bobcat]

"what was the initial access vector???"

YOU

[rustic carbon]

If it wasnt for the active directories burning me out

[molten bobcat]

YOU WERE!

[hoary nebula]

end users are stupid

[sharp shuttle]

I did IoT pentesting for south korean products, when i submitted the report they fought with me on whether or not CVSS scoring was REAL

[molten bobcat]

Issue rests on its fat ass between keyboard and chair

[native plume]

https://tenor.com/view/will-smith-cup-you-the-man-thank-you-thanks-gif-15285960

[dusky jacinth]

You ever test a product from supreme?

[meager kernel]

Ik ik

[dusky jacinth]

Suprema**

Actually

Nvm

[sharp shuttle]

i will never tell you what products ive pentested

[dusky jacinth]

I was abt to say

[hoary nebula]

Samsung galaxy s24

[lime trout]

Test the supreme brick

[supple plume]

Probably drones

[lime trout]

Great for physical tests

With destructive in scope

[dusky jacinth]

My favorite physical testing tool

[eternal mango]

Anyway, tldr nice work, but be careful. Not everyone is as open as your tutor, and your tutor unlikely has authority to permit such intrusive testing.

One fuck up can ruin your future career perspectives

[lime trout]

Penetration test a .50cal

[sharp shuttle]

Your tutor is certainly a moron

[hoary nebula]

50.caliber

[sharp shuttle]

take his advice with grains of salts

[hoary nebula]

ESPN !!!

[lime trout]

And I doubt having permission from them would matter

Since I doubt a reasonable person would expect a tutor to have the capacity to give it

Or the ability to bind the college to an agreement

[silver forge]

mm binding

[sharp shuttle]

Its like stealing a car and saying that the guy next to the car said it was his and you could have it

[meager kernel]

Yes sir I understand
My plan is to go tomorrow and get permission from the college dean for this

[eternal mango]

Ok well hold up

Speak to your tutor first

[lime trout]

I think that has a more clear cut case though

[eternal mango]

If you go to your dean and they are like "YOU DID WHAT?"

[meager kernel]

Then I'll perform the full bug hunt and report it

[lime trout]

One could reasonably believe it was their car

[eternal mango]

Focus on your college work

[supple plume]

@meager kernel if your tutor doesn't take responsibility you go to jail

[hoary nebula]

Pink cuff bindings

[lime trout]

Ima be real chief, they’re going to tell you no

It’s too much liability and risk

[meager kernel]

No no, ofc not, I'll go to my Head of Department first and then talk to him

[eternal mango]

If you get extra time and permission to test things, great.. but just.. no, be careful

[molten bobcat]

Yeah the IT department of the college is not a huge fan of students pentesting things without permission

[supple plume]

Rev shell = jail

[meager kernel]

Hopefully not

[molten bobcat]

Source: I was this guy

[eternal mango]

They will not give a contract for you to test the college infra

[meager kernel]

Ik

[lime trout]

Do you have liability insurance?

[eternal mango]

You are more likely to get kicked out, even with best intent

[sharp shuttle]

lmfao he doesnt even know what liability means

[molten bobcat]

It means you're responsible for damages 🙂

[hoary nebula]

elowel

[eternal mango]

Just trying to help you avoid a mess 22Kratos

[meager kernel]

Uhhhh

[meager kernel]

Yes sir
I understand

[tawdry sorrel]

Take it easy he is trying to do a good thing

[eternal mango]

It's easy to do things like that with the best intent, but also easy to get in to a mess if you do not have legal permission and experience to understand limitations and liability

[meager kernel]

It's just I got so excited cause I did a real life bug hunt and it felt so good 😭😂

[eternal mango]

We're trying to help protect them D3v

[alpine pumice]

we'll put money on your books

[sharp shuttle]

thats not how it works

[molten bobcat]

https://tenor.com/view/responsibility-when-i-avoid-responsibilities-matrix-avoiding-fast-gif-17904591

[lime trout]

Letting a college student fuck around with a production network, containing legally protected data and other PII is just a recipe for disaster

And they get 0 value out of it

[tawdry sorrel]

I know brother

[lime trout]

No one would let a student do that

[eternal mango]

You could easily be turned into a scapegoat too if something goes wrong

e.g. take down a critical system by mistake

[sharp shuttle]

this is why i can never go back to blue team, in any capacity

[molten bobcat]

I made some college kids shit their pants when I had to approach them and ask why they had pentesting tools on the desktop of one of my hosts.

[sharp shuttle]

fuck these kids man, i am fully demoralized

[eternal mango]

I noticed

😅

[lime trout]

Eh this is just common kids

I get how you could not understand this stuff

[sharp shuttle]

its so much worse than any of us think

[hoary nebula]

how did they install in the first place, should have denied install access

[lime trout]

Cause to them it’s just poking around and learning

[meager kernel]

Yes sir

[lime trout]

And not thinking of the risks involved

[meager kernel]

I will be careful

[sharp shuttle]

"learning"

i dont think thats part of the equation

[rustic carbon]

You guys make blue team like it's mining

[meager kernel]

Sorry I got a bit excited rn 😅😅

[molten bobcat]

Installation =/= downloads

[lime trout]

If you don’t know the risks it’s hard to evaluate

[meager kernel]

It's just that a real life bug hunt is kinda exciting

And gave me a blood rush

[eternal mango]

If you're after a real target to practice on

[sharp shuttle]

im not going to argue about the doomed kids, i am going to say they cant read

[eternal mango]

Check out the US .gov bug scopes

They are wide, and good practice

[hoary nebula]

on our hosts, no one can download anything without admin access

[rustic carbon]

You kinda make me afraid to actually pentest if the time comes bro damn 🥲

[hoary nebula]

download or install

[harsh elm]

Hi guys

[worthy cargo]

https://www.youtube.com/watch?v=zN8OjHgNevo This for brath

[meager kernel]

Hmmm I'll check that out too

[worthy cargo]

Full demoralization

[molten bobcat]

Places like schools and businesses have to balance security with accessibility.

[eternal mango]

When the time comes, you will have the appropriate contract and legal knowledge, or be working as an employee for a company that handles that.

[sharp shuttle]

you SHOULD be

its not supposed to be mr fucking robot

[lime trout]

Yeah corpo legal handles this stuff

It’s why doing independent work is risky

[molten bobcat]

It's only scary if you're doing it on your own with no guidance or backup at all lmao

[rustic carbon]

You actually have to have a lot of weight on your shoulders to pentest I see..

Damn

Alright interesting

[eternal mango]

Yup, I meant independant vs company work

[lime trout]

Some computers if you break it people die

[rustic carbon]

You can do independent work too?

[tawdry sorrel]

Developers nowadays use ai for making thier websites and apps so there will be valnurabilities

[rustic carbon]

PARDON? 💀

[sharp shuttle]

i do not want anybody but the best, most ethical, and stable people in this industry defending our future

[molten bobcat]

Hospitals and factories

[rustic carbon]

Ohhh

yall guys can hack ???

[molten bobcat]

Factory equipment is deadly when it breaks

[rustic carbon]

if you are near them tho

[sharp shuttle]

if you run nmap in a SCADA environment you are going to destroy alot of shit

[molten bobcat]

Yes but you don't wanna hurt other people

[zealous island]

hello im new to this

[terse dirge]

no

[eternal mango]

Not really... it's pretty easy, understand scope and liability, stick to it. If you want to work under contract with clients, you do need understanding of drawing contracts and covering yourself regarding damage. If you work for a company as a tester, they will handle most for you on that side, but it's still down to you to stay in scope

[lime trout]

Power plants

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[lime trout]

Any ICS really

[molten bobcat]

The list goes on and on yeh

[rustic carbon]

Well no shit that's why Im in htb and not tor rn

[sharp shuttle]

Yep

[hoary nebula]

https://tenor.com/view/typing-several-people-are-typing-gif-15407184

[rustic carbon]

oh alr tought im the only one

[terse dirge]

@zealous island

[zealous island]

thanks i apreaceate it

[hard harbor]

I know someone who bragged to me about going into a neighbor’s weather station because admin creds were defaulted like I was going to give him a pat on the back.. now i monitor his workstations even harder.

[rustic carbon]

Can I work independently too?

As a red teamer

[lime trout]

Yes

[molten bobcat]

But you shouldn't as a first go at it lol

[sharp shuttle]

its alot of work. get a corpo job first son

[rustic carbon]

Will that make more profit?

[terse dirge]

real

[eternal mango]

Yes, but if you do as I said you need an excellent understanding of contracts, scope, liability, insurance, etc etc etc

[lime trout]

Depends

[harsh elm]

Guys if I want a service like some help with hacking stuff

Where do I ask

[sharp shuttle]

not for a long time

[lime trout]

You have more upside, but also more risk and overhead

[eternal mango]

No @harsh elm

[terse dirge]

bruh why is there soo much async rat malware going around????

[rustic carbon]

I mean after I finish CJCA CPTS OSCP and other certs I think I would have a good understanding of them already

[harsh elm]

😔😔😔why

[lime trout]

When you work for someone they take alot of the risk on

[eternal mango]

This is a server for Hack The Box, a platform to learn. We're not here to provide hacking services.

[lime trout]

Compared to you doing it yourself

[rustic carbon]

You go a lot in greece Idk if you know about it too 🥲

[sharp shuttle]

if you get CPTS (harder than OSCP) you are ready for a entry-mid level pentesting role.

[harsh elm]

Oh okay

[lime trout]

I’m not Greek, but there is some Greeks around

[sharp shuttle]

my god

are these dudes for real

[terse dirge]

https://tenor.com/view/get-out-tuco-scream-mexican-angry-gif-5645373290661721744

[tawdry sorrel]

Just kidding

[lime trout]

But but the red rooms

[worthy cargo]

The fuck am I reading

[sharp shuttle]

its like a game to them

what the hell

[lime trout]

(/s)

[meager kernel]

@eternal mango alright, so my plan is, to go tomorrow and tell my Head of Department that I found a vulnerablility (he said to me earlier that I'm allowed to find vulns and report them), and then tell him to get me a written letter by the higher ups so that there's no action against me and I can safely give a whole write up
Good plan or bad plan?

[terse dirge]

idk I just got here

[hoary nebula]

kids these days

[eternal mango]

Well.. yes and no

[rustic carbon]

Yee I know you are not greek (Im MrHolmes if you dont remember haha) I'm just saying because (I think) you are one of the heads in this platform that you know about it... I could be wrong

[tawdry sorrel]

Adult kids

[worthy cargo]

How do you get that font in your name?

[eternal mango]

Ask for the letter of auth first, do not mention any findings

[meager kernel]

What should I change?

[lime trout]

I’m just the community person

[molten bobcat]

I'm just cloud

[lime trout]

G0blin is more of a head person lol

[rustic carbon]

are any germans here ?

[eternal mango]

But honestly, you will not get a letter of auth from the college in a legally binding matter

[hoary nebula]

wunderbar

[meager kernel]

Yes yes, I won't mention what findings I got, I just want the letter of permission

[terse dirge]

it's in the options on discord to change your username font

[eternal mango]

If you do, great.. but come on

[terse dirge]

I think it's nitro only tho

[eternal mango]

Be. Careful.

[rustic carbon]

Oh okay..

[eternal mango]

Even professionals mess up

You are in college to learn, focus on your colelge work

[lime trout]

That’s what insurance is for

[sharp shuttle]

the amount of failure you will experience will be overwhelming

[molten bobcat]

Goblin would you like a Christmas tree snack cake

[lime trout]

Errors and Omissions iirc

For this

[eternal mango]

It's not even December yet

Burn it

https://tenor.com/view/humbug-bah-humbug-scrooge-ebenezer-scrooge-a-christmas-carol-gif-10399459

[molten bobcat]

[eternal mango]

I'd love a conifer biscuit though

[rustic carbon]

Yeah g0blin I remember him the one that helped me in the past when I first got in the server

[lime trout]

Yo brath

Your in OR no?

[sharp shuttle]

I am

[lime trout]

Half debating moving there, wdyt of it

[sharp shuttle]

Youll do well here

[meager kernel]

Yes yes

I will be

[terse dirge]

there's also a bunch of Mirai going around too

[lime trout]

Portland area was the thought lol

[sharp shuttle]

I can see you joining our hackspaces pretty quickly

[meager kernel]

@eternal mango is it natural to feel an adrenaline rush when you find some bug

[sharp shuttle]

yeah, youll fit right in

[molten bobcat]

All I see is cred stealers disguised as PDF converters

Please help me

[lime trout]

I presume rent is mad

[rustic carbon]

Ofc bro you achieved something no one can do in your college lol

what do you think

[sharp shuttle]

thats just a US issue

but yeah

[lime trout]

Not bad in Missouri

[eternal mango]

Yes sure, but try not to get too excited. It can cloud your judgement, cause you to become careless

Keep your composure

[lime trout]

Or compared to Canada

[molten bobcat]

CLOUD YOU SAY

[meager kernel]

It's just that it's such a small vulnerability, but I knew of it cause I solved a HTB machine WHICH IS VERY SIMILAR

[eternal mango]

HAH

I knew you'd say that Cloud

😄

[sharp shuttle]

I am not sure what rents are right now, but portland is great because you can live along the trimet / train and get to portland under 40 minutes at the farthest parts

and it reaches super far

[rustic carbon]

G0blin do you know anything about the gr cybersec markets?

Or no?

[terse dirge]

chat, I think Mozi might be a slight problem

[lime trout]

Isn’t there also Amtrak to Seattle and Vancouver

[sharp shuttle]

yes there is

[eternal mango]

GR no not really, I'm in the UK, sorry

[meager kernel]

Imagine an easy machine being the equivalent of my college security 😭😭

[sharp shuttle]

goes all the way to alaska

[lime trout]

Based

[hard harbor]

My old roommate moved out there a few years ago from midwest and hasn’t looked back since

[rustic carbon]

No it's okay I was just asking 😂

[meager kernel]

Yes sir

[lime trout]

Eh, still waiting on USCIS to do their job but ty for info

[sharp shuttle]

if you end up moving ill happilly get you introduced to all the cyber folks here

[hoary nebula]

northwest is best

[lime trout]

Yeah appreciate it, it’s still a bit out

Need my green card first

Mind if I dm?

[sharp shuttle]

no problem

[hard harbor]

I was told the state public jobs out there pay decently enough. True?

[sharp shuttle]

they pay alright

[rustic carbon]

a sweet one too

[eternal mango]

Freddo is life

[sharp shuttle]

the majority of ICS work i do is through state programs

[lime trout]

No thank you

[sharp shuttle]

avg contract is 10k

[eternal mango]

Ew sweet?!

[rustic carbon]

You have tried one there?

[eternal mango]

Sugar doesn't belong in coffee

😅

[sharp shuttle]

agree!

[hard harbor]

I’m trying to stay in a public role unless something swings me private. Them PTO benefits are nice.

[eternal mango]

Yes many times

[lime trout]

If I went to EU I’d honestly goto like, Portugal or UK

[rustic carbon]

You drink it black? 🥲

It's bitter

[lime trout]

Easy visa

[eternal mango]

Yes, black coffee is the only way

I've never once there been asked if I want sugar in freddo

It's always black

[worthy cargo]

Just got a call from my cousin. She's like I got drunk and uninstalled what's app and now I reinstalled it but I can't remember my password. Can you hack it? I'm like I don't do that. Sorry. WTF man.

[eternal mango]

Maybe there's the expectation of you asking for it instead I guess

[rustic carbon]

You sure are a tough guy because I would never wake up drinking a black coffee 😭

It tastes like battery acid for me

[eternal mango]

It's like bitter

You get used to it

(bitter as in the drink, beer, etc)

[rustic carbon]

Its healthy tho unlike sweet coffee

Thats the plus

[eternal mango]

If you say so

[worthy cargo]

I don't even drink coffee or tea

I just drink water mostly

[eternal mango]

I don't know how adding sugar to something would make it healthier

[worthy cargo]

Sugar is a poison

Some say

In excess it is a poison

Makes you older faster

[eternal mango]

Water too

It's so evil

😄

[rustic carbon]

Overall sugar isnt good to digest on a huge amount that's why 🥲

[terse dirge]

I like my sweeteners artificial made by man!

[rustic carbon]

Imagine drinking a sweet coffee plus something sweet after lunch etc etc

thank god I dont eat a lot of sugar except my coffee

can someone help me to learn the basics ?

[hard harbor]

This is a normal day in america

[west lynx]

Get Started with the HTB Beginners Bible: https://www.hackthebox.com/blog/learn-to-hack-beginners-bible

[terse dirge]

@rustic carbon

[hard harbor]

We can help you help yourself

[rustic carbon]

Yee

[eternal mango]

I rarely eat anything sweet these days tbh

[rustic carbon]

Same here

Idk I lost my apetite lol

[eternal mango]

The odd treat now and again if the daughter asks for a pastry or something from the shop

Otherwise yeah, most of my sugar comes from 🍺 😅

[rustic carbon]

Beer?

[eternal mango]

That's what I said, yeah

[worthy cargo]

Beer is carbs, carbs is sugar

Ultimately

[rustic carbon]

Ohhh right

[worthy cargo]

That's why beer makes you fat

[terse dirge]

alcohol is interesting. Maybe I'm drinking stuff that's too strong but it's kinda meh

[worthy cargo]

Beer belly

[rustic carbon]

Beer belleh

Lmao

I was never a beer dude

But Im a huge wine guy

[hard harbor]

I like a good stout

[hoary nebula]

same

Stout

[rustic carbon]

especially cocktails

I tried once at a bar a mango cocktail and I never got another cocktail again lol

[zealous island]

i have an question. im currently learnin on academy.hackthebox.com but there is hackthebox.com whats the diffrence?

[terse dirge]

it's explained in the getting started module

[zealous island]

where

can u explain please?

that would be nice

[rustic carbon]

I think hackthebox.com is just the main menu to choose between academy and labs lol

[hoary nebula]

you just learned about subdomains

[zealous island]

and the academy one?

[terse dirge]

pretty sure it's explained in literally the first module on academy

[worthy cargo]

https://www.youtube.com/watch?v=5O5w0LIargQ

[verbal willow]

Hey, anyone up for taking a look at some of my bug bounty reports (not fully reviewed yet) and giving me honest feedback on which ones are likely to be accepted or rejected?
I’ve got a few vulnerabilities (info leak, unauthorized access, open redirect/SSRF, etc.) and just want an objective opinion before I submit them.

[terse dirge]

no

[worthy cargo]

Someone might steal 'em

[sharp shuttle]

feed them into a chatbot, that would take forever for us to review and i have no idea who you are

[terse dirge]

pretty sure it's also against the whole disclosure process too

[rustic carbon]

Alright broskis Imma peace out now

Talk to you guys this Friday again

Going MIA to finally finish this damn module once and for all

[sharp shuttle]

see ya

[meager kernel]

@eternal mango btw thanks alot man

I was getting a bit too excited

Might've done a mistake

[sharp shuttle]

proud of you for admitting it

[meager kernel]

I'll tread carefully and report it responsibily

Firstly I'll get a written permission for all this

[eternal mango]

No worries 22Kratos

Good luck

[hoary nebula]

@exotic pendant friday -5

[verbal willow]

The chatbot is always on the user’s side.

[signal mica]

warm beer 😩

[hoary nebula]

ewwwwwwwwww

[worthy cargo]

https://www.youtube.com/watch?v=i1NfWIaYed8

[hoary nebula]

A Balrog of Morgoth

[crimson orbit]

hi

[hoary nebula]

https://www.youtube.com/watch?v=lk9_h5DoDMw

[signal mica]

really you linked a john hammond video

yannick...

[hoary nebula]

its intresting

why the fuck is discord lagging as fuck

freezing every 2 sec when typing

[supple plume]

Actually John Hammond has a bot scanning this exact channel and when you say John Hammond he gets pinged and often looks at the message quietly

[signal mica]

))

[supple plume]

Seriously

[elder inlet]

Donating computer power to science is a nice feeling. CPU is donating to cancer research, GPU is donating to Alzheimers research, and I'm seeding Linux ISO's for freedom.

[eternal mango]

Folding@home ❤️

Truly a project ahead of its time

[vivid flower]

I used to run that

Damn you guys one of my phones actually had this spyware on it https://www.brinztech.com/breach-alerts/brinztech-alert-unremovable-spyware-appcloud-found-on-samsung-devices-poses-regional-security-risk/

Because i bought it in vietnam

[elder inlet]

I got Folding@Home for Alzheimers on GPU
BOINC is on Cancer on CPU

[eternal mango]

Nice one

[elder inlet]

https://tenor.com/view/well-there's-your-problem-mythbusters-adam-savage-jamie-hyneman-broken-gif-17934071823679545476

[vivid flower]

I hate phones so goddamn much

[hoary nebula]

why

[cloud osprey]

ring ring ring

[elder inlet]

And of course, you gotta seed those Linux ISO's

[cloud osprey]

banana phone

[vivid flower]

[lime trout]

imagine using an app named Cash

[vivid flower]

I dont really use it that much its left over from asia times

[supple plume]

Imagine using an app named app

[lime trout]

im weird and stick to Zelle

[vivid flower]

I use personal checks

[lime trout]

huh?

people still use those???

[vivid flower]

Well yeah

[lime trout]

i have never once Written, or been given a cheque

[vivid flower]

Why would you pay a middle man if you can just write a check

[lime trout]

Thats what zelle is for...

its built into banks apps.....

[vivid flower]

Okay but then your transaction is broadcast to credit agencies

[lime trout]

huh

[supple plume]

Writing a check is something I've only seen in shows about the 60s

[lime trout]

not anymore then using a personal cheque would

you can also use ACH

im weird and pay my rent via credit card

[vivid flower]

If you want to keep a bank account private the only way it doesnt get picked up by equifax is if you only use checks

[lime trout]

cause they c harge me like

$7 to do it

but i get ~$20 in value

[vivid flower]

Getting cc rewards on rent and taxes is pretty based ngl

[lime trout]

its great for hitting sign-up bonuses too

helped me hit the $8k spend for amex plat 😭

that was a rough one

[vivid flower]

Fancy

[lime trout]

honestly only reason i could hit it was rent tbh

[lime trout]

175k points is worth it

unsure if ill keep past first year

[vivid flower]

When i was churning i met my minimum spend by renting airbnbs monthly instead of renting

[lime trout]

i dont get how that maths

since wouldn't you be spending more?

as short term rentals cost more

[vivid flower]

I would snipe new users and get that 40% discount on top of the monthly discount. Sometimes id only pay 300 dollars a month

[lime trout]

ahh

In most cases it doesnt math

and it costs more

[supple plume]

I pay with normal bank transfer

[lime trout]

Yeah, EFT or ACH is common

[supple plume]

What is wrong with that?

[vivid flower]

You have to be good at it to save money doing that but at least i never had to furnish an apartment or sign a lease to a slum lord

[lime trout]

i just get enough points out of it that i can use at a high enough rate to make it a positive value

since i can get 3-4cpp on amex MR

[vivid flower]

And usually people are happy to see me and id have a kitchenette or something

[supple plume]

To pay rent is not recommended to use cash

[lime trout]

or atleast get a receipt if you do

Debit card

ACH

[vivid flower]

Nowadays id just car camp instead of renting

[eternal mango]

Keeping a healthy credit card payment / repayment helps build credit score too, and if you pay before interest rolls in there's no difference between just using a debit

[lime trout]

cause it costs 2-4% to process a credit card

and they just pass onto you

[lime trout]

you can just put $10 netflix on a card though

and it'll report the same

[vivid flower]

Way less stress than being a wagie

[eternal mango]

Keeping a healthy credit balance impacts credit score in the UK

e.g. over / under utilisation has an impact

[lime trout]

it doesnt matter how much you spend, just that its paid

[supple plume]

Use nitro to pay

[lime trout]

does it have a history?

[eternal mango]

It does in the UK

[lime trout]

here util is counted, but it has no history

so you just pay down 30-45 days before a new credit application

and running a high balance is good sometimes for CLIs

[eternal mango]

e.g. if you have a £10k credit and don't use it, that is a negative

[lime trout]

wtf?

[eternal mango]

If you have a 10k and use 8k often, that's negative

[vivid flower]

Really thats dum

[eternal mango]

If you have 10k and keep it around 10-20%, that's positive

[lime trout]

thats dumb af

[eternal mango]

Well yeah

The whole credit score system is a piece of shit

[vivid flower]

Shouldnt it be low % util

[eternal mango]

Nah

[lime trout]

i have like, 80k in total credit extended and i barely touch any of it

[eternal mango]

They want people to use the credit, but be able to pay it without trouble

[lime trout]

bar a few cirmcumstances

[eternal mango]

No usage, no value, too much, big risk

[rustic carbon]

Isnt there a better benefit to use credit card instead of debit?

[eternal mango]

Just right amount, means low risk value

[rustic carbon]

Thats why I use credit

[lime trout]

Fraud protection

Rewards

[rustic carbon]

Yeah I was right

[eternal mango]

Yes, THIS

[lime trout]

Flexibility with expenditure

[eternal mango]

If anything, fraud protection is the BIGGEST benefit

Can't chargeback a debit

[lime trout]

Purchase Insurance is also 10/10

[eternal mango]

Can a credit

[rustic carbon]

Well yee if they get your info they are stealing bank money not yours

[cloud osprey]

not true these days

[lime trout]

Cause i can let my capital sit in a HYSA doing earning interest until its due

[supple plume]

Can't charge my debit card either since I have 0€ on it

[lime trout]

rather then it go out right away

[lime trout]

your out the money until its finished

unlike with credit you get instant credit

[supple plume]

Fraud protection 💪

[eternal mango]

Went back to reply about HTB staff if they are mostly UK, but can't see who said it now

But the answer is no

Majority is GR, but we have staff globally

[lime trout]

Honestly for me the biggest + is the purchase protection

if i break/lose/stolen something its just covered

[cloud osprey]

my bank will refund any disputed claims immediately

[rustic carbon]

I did not expect that the land I live invented hackthebox

I am proud

[supple plume]

Cool

[lime trout]

ive never had to do it on debit so 🤷

[terse dirge]

No drinks for me tonight. I had allergy stuff

[lime trout]

just what ive heard

my only chargeback exp is with Amex

and theyre great to deal with

[rustic carbon]

Do you guys do htb events in greece too?

With members allowed tho

[lime trout]

https://hackthebox.com/meetups

[rustic carbon]

.

[lime trout]

Return protection is also kinda cool

return items to CC company if its after return period

[eternal mango]

Community meetups are that.. community

They are public, anyone can join them

[supple plume]

Omster 👇

[lime trout]

Omster 👇

[rustic carbon]

Ohh yeah.. Im stupid lol

[eternal mango]

All good, me too sometimes

[rustic carbon]

They're all online tho?

Not fun

lmao

[eternal mango]

No

[tiny canyon]

@terse dirge just committed cyberterrorism on my neighbours wifi

[supple plume]

Dang

[eternal mango]

There are many in person meetups people organise

[supple plume]

@terse dirge that is too much

[rustic carbon]

Really?

Didnt find any now

[eternal mango]

Yes, we get shown photos and feedback from awesome meetup hosts frequently

[rustic carbon]

Do you guys participate in them too?

[cloud osprey]

imagine if it was "feetup" instead

[rustic carbon]

I need them

[eternal mango]

Staff do attend when able or arranged yes

[rustic carbon]

Dope..

[eternal mango]

but I'm not really involved in that side of things, I'm just saying what I see

[rustic carbon]

Even british ones or other countries in gr too?

[eternal mango]

Whenever they are able or it is arranged

[lime trout]

its mostly community ran/lead

[rustic carbon]

That's dope..

[lime trout]

staff involvement will depend on which meetup

usually just happens one is close

[eternal mango]

yarp

[supple plume]

When in Spain?

[rustic carbon]

Can I dm?

[elder inlet]

Suggestion: Have a search feature. Or atleast have an upcoming event show up first, Cause Quebec Canada came up first and that ended. But the one in Switzerland is next upcoming and you have to scroll all the way over to know that

[lime trout]

/feedback

[elder inlet]

https://tenor.com/view/gohine-hohino-no-hohineee-gohineee-gif-17792172174678204487

[terse dirge]

https://tenor.com/view/cat-shake-head-sicko-mode-orange-tw-aesthetic-gif-22443433

[supple plume]

What have you done with his neighbors wifi

[terse dirge]

made everything redirect to cat videos

[eternal mango]

https://www.meetup.com/pro/hack-the-box/

Not sure why we aren't linking there anymore on the website

[rustic carbon]

That's even more clear...

[supple plume]

Hallicon 👇

[rustic carbon]

Exactly..

why?

[eternal mango]

?

[frail turtle]

God i am suffering from this weird virus now for like 3 days phlegm, bloody mucus, and now bloodshot eyes. I have no idea what it is but it's a respiratory virus

[rustic carbon]

Why arent you linking this website I mean

It's even more clear than the previous one

[eternal mango]

Like I said, I don't know, we were

Things change

[supple plume]

Dang, time to update the kernel

[eternal mango]

Could be it's in the TODO after changes to the website

[rustic carbon]

So what do you do on the Cyber training gamified?

[eternal mango]

I'll mention it internally anyway

[supple plume]

Get better man 💪

[frail turtle]

I look like i caught a virus from africa or the islands this shit isnt normal

Thanks

[supple plume]

Remember to stay hydrated

[frail turtle]

I never had a respiratory virus that affected my eyes though its pretty scary but ive been getting better

[eternal mango]

Me personally?

[rustic carbon]

Not you personally

Overall what's the goal

Oh nvm it has a description

[eternal mango]

https://www.hackthebox.com/hacker

[rustic carbon]

g0blin for the love of god

You are god's gift in this server

[supple plume]

Time to shower outdoors with the cold wind

[fair drift]

If I got the student subscription on HackTheBox, I would still need to pay for the exam's voucher?

[supple plume]

💪 💪 💪 💪 💪 💪 wish me luck or quick death

[eternal mango]

Yes

[rustic carbon]

Literally you saved me a lot of times man 🥲

[eternal mango]

All good, you're welcome 🙂

[rustic carbon]

I didnt know I could do the other half of those

[eternal mango]

Gonna go game for a bit before bed now, nn

[rustic carbon]

I didnt know I could compete with others in htb bro

NOW I am motivated

[eternal mango]

Battlegrounds is actually no longer a thing..

..I've raised that internally too, I don't think it should be there

[fair drift]

Shit. That's odd because if I am not mistaken HTB themselves recognize that their certs aren't recongized by employers lol

[eternal mango]

Our certs are recognized

[rustic carbon]

Awwwww

And I got excited

[eternal mango]

Where on earth did you see us say we say they are not?

🤣

[cloud osprey]

its called discord general chat now

[rustic carbon]

Why are battlegrounds no longer a thing

I would be in the website 24/7 prolly even guru by now

lmao

[sharp shuttle]

why dont you tell us

its obvious

[fair drift]

Uhh, literally everybody on here talks about this. Maybe not "you", but it's not something unheard of. An example from yesterday #blue-team message

[eternal mango]

Well, everyone is welcome to their opinion

[cloud osprey]

they can have my opinion too

[eternal mango]

But an opinion does not mean fact for all

[rustic carbon]

If it was I wouldnt ask

[sharp shuttle]

critical thinking my friend

[rustic carbon]

Louder so everyone can hear it 💀

[eternal mango]

Besides, nowhere there did "htb recognize our certs aren't recognized"

[rustic carbon]

Because if I say it they dont listen

[eternal mango]

You're just talking bs on that point

[rustic carbon]

Because of toxicity maybe?

[sharp shuttle]

if you are playing a game, what would you define as grinding?

[rustic carbon]

Hear me out

[cloud osprey]

back in my day, grinding was when a girl and a guy really liked eachother and then "danced"

[rustic carbon]

personally if I enjoy what Im doing and I see it as entertaining more than homework I grind even more

[fair drift]

Are you talking about the message I referenced? You just didn't read the whole thing, this is the quotation:

Literally nobody recognized the CDSA, whenever I apply for a job they just ask me why don't you take the BTL1
Idk why you got triggered

[sharp shuttle]

no.... grinding is perfecting a set of instructions to optimize for time and reward

thats what happened to battlegrounds

the lack of randomness made them speedrunning problems

[eternal mango]

https://roadmap.hackthebox.com/changelog/battlegrounds-is-being-retired-on-htb-labs

All I've got for you tbh, but imho we couldn't at that time focus on building it out further, and as such usage of it was very low.. I wouldn't be surprised if we did something else in the future in the same vein

[rustic carbon]

So you are saying there was an imbalance between theory and practical?

[sharp shuttle]

im saying that if you go up against someone at the "end game" you will get crushed by scripts

[rustic carbon]

Ohhh

[eternal mango]

Mate, I was answering your question, you haven't triggered me

[rustic carbon]

that makes sense

[modest pasture]

hello guys anyone did "giveback" recently ?

[rustic carbon]

Oh power imbalance then

[eternal mango]

Just.. if you say something, make sure you say it in fact

[rustic carbon]

Yeah that makes sense

[fair drift]

Lol this guy reads half way through only

[rustic carbon]

No I did 💀

[eternal mango]

You said "HTB themselves recognize that their certs aren't recognized by employers"

[rustic carbon]

June 15 huh?

A month before I started cybersec

[eternal mango]

The thread you refer to doesn't show that at all

[elder inlet]

Hmmmmm wonder what my computer is doing

[sharp shuttle]

are you sure this wasnt ran on general today?

[elder inlet]

general?

[sharp shuttle]

yes, here

[eternal mango]

What you said made it sound like HTB, the company, stated that

Surely you can see the confusion?

[rustic carbon]

When you guys are done I want an advice before I peace out until Friday

[fair drift]

Well, it does show somebody talking about their experience with employers not recognizing the cert. Maybe he's not the CEO of HTB yeah, but the server is full of examples so it's not exactly the point whether they are shareholders or not. Anyway, I appreciate your clarification

[sharp shuttle]

omg you changed your name again...

[rustic carbon]

To match it with mrholmes 🥲

But red team style

[sharp shuttle]

"red team style"

nobody uses 1337 speak broski

[rustic carbon]

Not literally 💀

But its less blue team

[rustic carbon]

I used h0lm3s on the other one too

[sharp shuttle]

@amber peak

wow two different people

so confusing

[rustic carbon]

ay

dope pfp tho

[cloud osprey]

nvm

[sharp shuttle]

isnt this just fpv megabonk then?

lame

we can never have cool vr games

[rustic carbon]

So I want your last advice before I peace out...

can I?

[sharp shuttle]

dont ask to ask

just shoot and let the kangaroo court deal with it

[eternal mango]

That's fair enough, as I said everyone has their opinion and I welcome it, and it's true not every company sees every certification in the same way, nor has every company heard of or has knowledge of every cert out there, but as a relatively new company I think we're doing pretty well.

Gonna go game for a bit, but what I'll leave you with is.. many times I've heard from community members who have fed back stating HTB, either purely due to the Labs, Academy or Certifications have directly led them in to and landed them a position in the field. When I hear that, it melts my heart.

I'm not trying to pretend we're known by everyone, nor am I saying we're the defacto in security for everyone.. there's no right answer when it comes to skills and certification

..but the fact we are helping, that's what matters

[orchid talon]

finished 4 machine through openvpn

[sharp shuttle]

you should be completing every machine through openvpn no?

but anyways, proud of you

[rustic carbon]

So I've been stuck on noob for 2 months here, aka I made no practical progress but made a lot of academic progress💀 - Which has to change. My plan is to finish the last module (Active Directories) on the Information Security Foundations path and then go to Jr Cybersec Analyst path to finish CJCA, then CPTS.. so on and so on..
Now, the question is, since Im gaining more theoretical knowledge and no practical skills, what do you recommend me to do? Im thinking either watching ippsec's easy retired boxes, or even wait it out until I'm in the penetration tester path and take months until I get practical skills to finish matchines etc etc...
I need serious help with this, like desperately

[orchid talon]

i ran out of pwnbox

[sharp shuttle]

good, pwnbox is kinda not worth using (no offense g0b)

[eternal mango]

https://tenor.com/view/angry-fist-arthur-憤怒-gif-5794225

😄

[sharp shuttle]

you should be running a vm of kali, parrot, or whatever OS you like

[eternal mango]

Gonna go shout at clouds

[orchid talon]

yea i was using kali iso

[sharp shuttle]

amazing

[maiden anvil]

this was me for the past several hours vibing a burp extension into existence

[orchid talon]

was recommended virtual box

idk if thats the best but it works

[sharp shuttle]

vbox works, and its free

free is good

responding to you now retro.

[elder inlet]

What I said? I'm so confused lol

[sharp shuttle]

play retired machines, use the walkthrough and watch ippsec. do both.

there is nothing wrong with using a walkthrough to learn

[plush zephyr]

Heylo @eternal mango

[supple plume]

Im back

[plush zephyr]

How you doing

[eternal mango]

No not you

[rustic carbon]

Yeah but that's the thing that's why I came here to ask that... do I learn anything doing them with ippsec or is it gonna make me learn it "parrotish", aka do things and not understand why Im doing them??

[eternal mango]

Hey Lanex, I'm ok thanks, how're you?

[sharp shuttle]

you can watch ippsec do it his way and do it your way

[rustic carbon]

I dont have a way unfortunately tho..

I dont have any practical skills

[sharp shuttle]

what does that mean

im going to be real retro

[plush zephyr]

I am doing fine

[rustic carbon]

Everything I have is pure theory from academy

[supple plume]

I think you should focus on 1 kind of box at the beginning either web or AD

[plush zephyr]

Have you taken any new photos?

[supple plume]

But that's my opinion

[plush zephyr]

Also, guess what!!!!!!

[sharp shuttle]

this @orchid talon guy was here yesterday with practically no experience and hes already done more than you after two months, it sounds like you are lazy to me, retro

[plush zephyr]

I am planning to buy a camera soon

[rustic carbon]

Well it's also that I have college work burnouts and the hospital scare on the side.. 🥲

It's not really laziness

[supple plume]

What about background

[rustic carbon]

I think Im doing something wrong that's what

[sharp shuttle]

you cant make excuses if you want something, stop playing video games, start there

[rustic carbon]

I don't play videogames 💀

[eternal mango]

Only one, been pretty meh this past month or two so lacking motivation, but looking forward to 3I/ATLAS being visible in late Nov/early Dec to get some shots

[rustic carbon]

For me they were so last year

[sharp shuttle]

i doubt this greatly.

[rustic carbon]

I would show you proof but I dont have any

Plus my laptop is not a gaming

[eternal mango]

I got an FPV drone recently so got a load of videos from that, but they all have my daughter in so won't share those publicly

[sharp shuttle]

then you have no real excuse for why you cant do a retired machine once a day

[eternal mango]

Sooo much fun

[plush zephyr]

Woah ATLAS, hope there won't be clouds to ruin it

[eternal mango]

It'll be visible through late nov and peaks in dec

so I'm sure there will be some clear nights

[plush zephyr]

Understandable

[eternal mango]

Hope to be able to capture its weird glow

[rustic carbon]

See that's the core of my issue... I really want to, but Idk how.. do I wait it out until I learn nmap metasploit etc from the academy? Do I watch ippsec? What if I do a retired matchine and I dont understand what I did?

I dont want to do matchines just to do them.. I want to do them and understand how I did them

[sharp shuttle]

why are you so timid, surely you are not like this in real life? Just fucking do it man

start the machine and work through it

[robust token]

Fake it until you make it

[rustic carbon]

I am 💀

[eternal mango]

Anyway.. game time finally, before it's too late 🤣 catch you later, will let you know if / when I get any decent captures

[robust token]

[rustic carbon]

Idk if that's a weakness

[supple plume]

Attack the machine in all holes and document how and why

[sharp shuttle]

the way you talk frustrates me, unconfidence is pathetic

[plush zephyr]

Aight aight

[rustic carbon]

I am not confident because I want the most effective way.. and that's why I asked for advice

[plush zephyr]

Also i wanted to get your opinion on the cam i was buying

[sharp shuttle]

the most effective way is to do it... you talk about being a red teamer but you lack even a hackers mindset. at this rate you are fucked

get a grip

[rustic carbon]

..fine

[sharp shuttle]

and i will be here to celebrate your first pwn

[rustic carbon]

I'll give updated by friday

[sharp shuttle]

ill hold you to it

[rustic carbon]

I did all the very easy ones on my own and some without even google Im in a good start

But the damn easy ones..

[robust token]

Basically the best advice anyone can give you is don’t overthink it

Just do it

[rustic carbon]

Alright thank you so much dudes

[orchid talon]

fine ill do it myself

[rustic carbon]

Highly appreciate the help

[supple plume]

Remember less yapping more hacking

[orchid talon]

someone do embedded thanos

[sharp shuttle]

https://tenor.com/view/thanos-gif-25117042

[rustic carbon]

That's why I said Im going MIA until Friday 💀

If I leave the server it's because Im removing distractions

[sharp shuttle]

good call

[eternal mango]

Everyone starts somewhere, confidence is built upon experience, it's not innate. Lacking confidence is not a sign of weakness, but it can be a driving force behind self improvement, by learning, doing, sharing.

Do what you can, learn, practice, experiment and build your own way

There's nothing wrong with standing on the backs of giants, and using knowledge shared to build your own skill set

[signal mica]

does bradly dare to

[rustic carbon]

Why are there more people like you man?

Literally we might have the same mindset but Im on the other side of the table now

[sharp shuttle]

youll come to learn my tough love was necessary

[rustic carbon]

I'm not thinking straight because I'm stressing about it

[rustic carbon]

Yeah it damn works alright..? 💀🔥\

[robust token]

Stressing about what? Breaking a lab ?

[rustic carbon]

Not understanding a matchine when I pwn it

[sharp shuttle]

ive learned nobody else will talk to you kids like i do, which is a problem. You automatically think its hostility, its truly sad

[signal mica]

brath how good is your hardware - specifically for hashcat cracking

[sharp shuttle]

i just use a 4080, i hardly have to crack anything because i can extract the keys from hardware/firmware directly

[supple plume]

Crack deez nuts

[signal mica]

let me ask for a favour then in dm

[rustic carbon]

Well now that you called me lazy you really struck a nerve but in a good way

[sharp shuttle]

yeah, well you are lazy

[rustic carbon]

Even tho you werent fully accurate of why you sure did a job

[sharp shuttle]

so prove me wrong

[sharp shuttle]

go for it

[orchid talon]

worst that can happen is you accidentally have 2 windows trying to dual boot into kali

[rustic carbon]

Yeah true now that I think about it

I was super idle this week unlike the other weeks

Yeah.. you're right

Alright homies

Going MIA

See you in Friday

[supple plume]

Discord absovs time

[sharp shuttle]

good luck

[supple plume]

Get shit done

[orchid talon]

if i pay for vip+ does that include labs and academy?

[supple plume]

No

[orchid talon]

bruh

[supple plume]

Unfortunately labs and academy are totally separated

[supple plume]

Yeah...

Also prolabs are not included in vip+

[sharp shuttle]

nope

[supple plume]

Prepare your whole ass budged

To be spent if you want to learn the good stuff

[desert cargo]

Ello

[orchid talon]

not all of us are millionaires

[sharp shuttle]

and there is a extremely high chance you never will be

[supple plume]

What plays in your favor is if you pay and it hurts, you'll be less likely procrastinating

[granite sedge]

Saying that inflation makes it pretty likely we'll all get there

[orchid talon]

hmmm

[sharp shuttle]

you have too much confidence in inflation being an in issue in the future

im more concerned about drinkable water

[orchid talon]

cant tell if this is an insult, rage bait, or idk

[sharp shuttle]

probably all of the above

[desert cargo]

Water shouldnt be a big problem at all with current Innovations
Breathable air bigger Problem

[granite sedge]

When we find a way to make purifying water more energy efficient it won't be. Or we just make more power

[sharp shuttle]

all my drinking water is going to be privatized to cool data centers running chatgpt queries about how to put your pants on and sora ai videos queries about skibadi toilet jujutsukaisen anime fights

[granite sedge]

worth

[desert cargo]

You got a point lmao

[supple plume]

And automatic jesus

[granite sedge]

Super random question, would someone who has submitted a CVE before do a double take on my CVE write up? I'll credit you if it goes through

[desert cargo]

I think thats forbidden actually

[granite sedge]

It'd be forbidden to share it indiscriminately

[supple plume]

That reminded me the guy that offered reviewing the whole bug bounty report before submitting

[granite sedge]

Mine is already submitted on github disclosure I just wanted someone to double check if I've missed anything